Analysis
-
max time kernel
33s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 17:05
General
-
Target
5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe
-
Size
224KB
-
MD5
43135da1f8f2a8ad38ad7c75493302b0
-
SHA1
7763d204c084a05172017ac520cbc50b94c848aa
-
SHA256
5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f
-
SHA512
ddc70fe43051bed1b4c2d3ef1df71ae58b1f331e38328f0cd6adf4c43ccdd9c06fb4dfcda81bcdf54c6e499a65fad7a4f5c05bee72a7b7eb9c9ad3167ecf021d
-
SSDEEP
3072:28GvGsZ5qbLj1w+A3W66NYa7CgPCmHV1BdHDYqzUnQUoulDu:2XLqvj1BA76HCgPCmHV1BdHDYoUZY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe"C:\Users\Admin\AppData\Local\Temp\5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2024 -s 1882⤵
- Program crash